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DETAILED ACTION 
Claim Objections 

Claims 1-10 objected to because of the following informalities: Recitations from 
the claims often fall in prentices but it appears what is cited is intended to be claimed 
(Ex, claim 1, equations for multi-exponentiation and multi-scalar multiplication). 
Generally, prentices are reserved for citing Figure elements to further clarify the claim 
language and no patentable weight is given to the contents of the prentices [See MPEP 
§ 608.01 (m)]. 

Claims 1 , 8 and 9 objected to under 37 CFR 1 .75(c) as being in improper form 
because a multiple dependent claim 10. See MPEP § 608.01 (n). Accordingly, the 
claim has not been further treated on the merits. Appropriate correction is required. 

Ciaim Rejections - 35 USC § 112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 

The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 

Claims 1-10 rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

As per claim 1 , it is unclear if the applicant is claiming a method for multi- 
exponentiation or multi-scalar multiplication or exponentiation or scalar 
multiplication. For purposes of examination, the multi-exponentiation case will be 
rejected. Regarding claim 1, the phrase "for example" renders the claim indefinite 
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because it is unclear whetlier tine limitation(s) following the phrase are part of the 
claimed invention. See MPEP § 2173.05(d). 

Claims are replete with "(multi-)", for purposes of examination it is 
construed that the multi Is a claimed limitation. 

Claims are replete with and/or statements, for purposes of examination it 
is construed as a non-inclusive or statement. 

Claims 7-10 provides for the use of a method in hardware, but, since the 
claim does not set forth any steps involved in the method/process, it is unclear 
what method/process applicant is intending to encompass. A claim is indefinite 
where It merely recites a use without any active, positive steps delimiting how 
this use is actually practiced. 

Claim Rejections - 35 USC § 101 

35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, macliine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

Claims 1-6 and 10 rejected under 35 U.S.C. 101 because the claimed invention 
Is directed to non-statutory subject matter. Claims 1-6 recite a method for performing 
multi-exponentiation featuring steps for performing recursive mathematical operations 
without any recitation of hardware elements or a transformation of an article 
representing a tangible and physical object. The method steps for performing the 
equations preempt any and all uses of the equations. Therefore the method steps that 
are central to the process do not explicitly require physical hardware, thus the claimed 
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method does not define any structural or functional interrelationships between the 
method and an otherwise statutory class. Additionally, while the steps of computing and 
finally storing by a processor (steps a and b) require a machine, the required machine 
does not pose a meaningful limit on the claim's scope because the steps are not central 
to the purpose of the method invented by applicant, and can be considered merely an 
extra-solution activity. 

Claim 10 recites systems for performing the method of claim 1 but the recited 
systems are software per se. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the Invention was patented or described In a printed publication In this or a foreign country or In 
public use or on sale In this country, more than one year prior to the date of application for patent In 

the United States. 

Claims 1-6 rejected under 35 U.S.C. 102(b) as being anticipated by "Improved 
Techniques for Fast Exponentiation" by Bodo Moller (hereinafter Moller). 

As per claim 1 , Moller discloses a method for the multi-exponentiation or the multi- 
scalar multiplication of elements by means of in each case at least one exponent or 
scalar, in particular an integer exponent or scalar (Introduction [Page 1] paragraph 1 
and Multi-Exponent by Interleaved Exponentiation paragraphs 1-2, multi exponentiation 
is being performed), which has in each case a maximum bit rate or bit length, in 
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particular for tine exponentiation or scalar multiplication of an element by means of at 
least one exponent or scalar, in particular an integer exponent or scalar, which has in 
each case a maximum bit rate or bit length, which elements derive from at least one 
group, for example an Abellan group, which in the case of exponentiation is notated in 
particular multiplicatively and in the case of scalar multiplication is notated in particular 
additively (Introduction [Page 1] paragraphs 1-2 and Multi-Exponent by Interleaved 
Exponentiation paragraphs 1 -2, exponentiation of more than one scalar is applied 
where there are domain parameters for the group to be exponentiated), characterized 
by the following method steps:[a. 1] computing and storing or[a.2] retrieving from at 
least one memory all powers or all multiples, wherein c is a permissible positive 
coefficient (Introduction [Page 1] paragraphs 3-5, a vector of exponents is retrieved for 
exponentiation) ;[b] dividing each exponent or scalar into a number of chunks or into a 
number of parts having a chunk or part width defined by a specific bit rate; and[c] 
individually receding the chunks or parts (Notation paragraph 1 , c is a receded section 
of bits for the vector of exponent to be performed). 

As per claim 2, Moller discloses a method as claimed in claim 1 , characterized in that 
the exponent or scalar) is represented in the divided form E.sub.i = 
.SIGMA.. sub. k=0.sup.r e.sub.i, k2.sup.kL, wherein r is defined as the number of chunks 
or parts, in particular as an integer quotient of the maximum bit rate and the bit rate of 
the chunk or part width, and 0 <= e.sub.i, k < 2.sup.L (A Framework for Exponentiation 
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[Page 2], paragraph 1 , each exponent is brol^en into subsections of I bits where each 
exponent is less than the maximum bit length I). 

As per claim 3, Moller discloses a method as claimed in claim 1 , characterized in that 
the chunk or part width is selected to be significantly greater than a parameter which 
corresponds to the width, in particular to the upper limit of the width, of a window over 
which the bits of the respective exponent or scalar are read, and significantly shorter 
than the maximum length of each exponent or scalar , in particular is selected prior to 
method step [a.1] and/or [a.2] (Section 4 [Page 5], Paragraph 1-3, a window parameter 
w is the window size for every given exponent to be scanned). 

As per claim 4, Moller discloses a method as claimed in claim 1 , characterized in that in 
the case of exponentiation, method step [c] of receding the chunks or parts can be 
divided into the following sub steps for each individual chunk or for each individual part 
of each exponent: [c. I] setting a temporary variable to a standardized value, in 
particular to the value 1 of the element of the group which is neutral with respect to the 
group operation assigned to the group (Section 3, A is set to 1 g); [c.2] successively 
setting a variable to the values r-1 , r-2, 0, wherein for each value k=r-1 , r-2, 0 of the 
variable the following sub steps are carried out (Section 3, for i=l down to zero): [c.2.i] 
for each value i=1 , 2, d of an index, wherein d is defined as the number of elements, in 
particular depending on the number of exponents assigned to the elements (Section 3, 
for each element in the exponent bjj): [c.2.i.a] receding the chunk or part as the sum of 
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powers of two weighted by in eacli case at least one coefficient deriving from at least 
one finite set of integers (Section 3, receding the element to g'^'^'); [c.2.i.b] if the 
coefficient assigned to the highest power of two does not vanish: setting the temporary 
variable to the product of temporary variable and the power of the element which is 
assigned to the coefficient of the highest power of two; [c.2.ii] for each value j=L-1 , L-2, 
0 of the index (Section 3, if B is not zero selectively replacing A with new element): 
[c.2.ii.a] squaring the temporary variable (Section 3, A = A^); [c.2.ii.b] for each value i=1 , 
2, d of the index: if the coefficient assigned to the power of two does not vanish: setting 
the temporary variable to the product of temporary variable and the power of the 
element which is assigned to the respective coefficient of the power of two; and after 
method step [c] of individually receding the chunks or parts the temporary variable is 
returned (Section 3, if B is not zero perform operation on A and return A when final 
iteration complete). 

As per claim 5, it is the method of claim 45. A method as claimed in claim 1 , 
characterized in that in the case of scalar multiplication (Inherent [Section 1 [Page 1], 
line 20], applying the same windowing function to the scalar of a multiplication will result 
in the same steps as applying the window function to an exponent of an 
exponentiation), method step [c] of receding the chunks or parts can be divided into the 
following sub steps for each individual chunk or for each individual part of each 
exponent: [c. I] setting a temporary variable to a standardized value, in particular to the 
value 1 of the element of the group which is neutral with respect to the group operation 
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assigned to tlie group (Section 3, A is set to 1g); [c.2] successively setting a variable to 
the values r-1 , r-2, 0, wherein for each value k=r-1 , r-2, 0 of the variable the following 
sub steps are carried out (Section 3, for i=l down to zero): [c.2.i] for each value i=1 , 2, d 
of an index, wherein d is defined as the number of elements, in particular depending on 
the number of exponents assigned to the elements (Section 3, for each element in the 
exponent bj,i): [c.2.i.a] receding the chunk or part as the sum of powers of two weighted 
by in each case at least one coefficient deriving from at least one finite set of integers 
(Section 3, receding the element to g'^'^'); [c.2.i.b] if the coefficient assigned to the 
highest power of two does not vanish: setting the temporary variable to the product of 
temporary variable and the power of the element which is assigned to the coefficient of 
the highest power of two; [c.2.ii] for each value j=L-1 , L-2, 0 of the index (Section 3, if B 
is not zero selectively replacing A with new element): [c.2.ii.a] squaring the temporary 
variable (Section 3, A = A^); [c.2.ii.b] for each value 1=1 , 2, d of the index: if the 
coefficient assigned to the power of two does not vanish: setting the temporary variable 
to the product of temporary variable and the power of the element which is assigned to 
the respective coefficient of the power of two; and after method step [c] of individually 
receding the chunks or parts the temporary variable is returned (Section 3, if B is not 
zero perform operation on A and return A when final iteration complete). 

As per claim 6, Moller discloses a method as claimed in claim 1 , characterized in that 
the receded chunk or the receded part is used once and the memory unit in which the 
receded chunk or the receded part is stored is used to recede the following chunk or the 
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following part (Section 3 [Page 5], lines 4 [equation for power product], for successive j 
in range 0 to k, gj Is reused). 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 7-10 rejected under 35 U.S.C. 103(a) as being unpatentable over Moller 
in view of Tenca et al. (US 7,046,800) (hereinafter Tenca). 

As per claim 7, Moller fails to disclose expressly, a method as claimed in claim 1 , 
characterized in that the method is implemented on at least one microprocessor 
assigned in particular to at least one chip card and/or in particular to at least one smart 
card. 

Tenca discloses a method as claimed in claim 1 , characterized in that the 
method is implemented on at least one microprocessor assigned in particular to at least 
one chip card and/or in particular to at least one smart card (Column 15 lines 22-39, 
exponentiation can be performed in hardware modules as a microprocessor in a smart 

card). 

Moller and Tenca are from the same field of endeavor as multiple exponentiation. 
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It would have been obvious at the time of the invention to modify the equations of 
Moller and implement them in a microprocessor on a smart card as shown in Tenca 
because it would allow for the advanced technique of applying multiple exponentiations 

to be used in a cryptographic system. 

As per claim 8, Moller fails to disclose a microprocessor which operates in 
accordance with a method as claimed in claim 1 . 

Tenca discloses a microprocessor which operates in accordance with a method 
as claimed in claim 1 (Column 15 lines 22-39, exponentiation can be performed in 
hardware modules as a microprocessor in a smart card). 

Moller and Tenca are from the same field of endeavor as multiple exponentiation. 

It would have been obvious at the time of the invention to modify the equations of 
Moller and implement them in a microprocessor on a smart card as shown in Tenca 
because it would allow for the advanced technique of applying multiple exponentiations 
to be used in a cryptographic system. 

As per claim 9, Moller fails to disclose expressly a device, in particular a chip 
card and/or in particular a smart card, having at least one microprocessor as claimed in 

claim 8. 

Tenca discloses a device, in particular a chip card and/or in particular a smart 

card, having at least one microprocessor as claimed in claim 8 (Column 15 lines 22-39, 
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exponentiation can be performed in liardware modules as a microprocessor in a smart 
card). 

l\/loller and Tenca are from the same field of endeavor as multiple exponentiation. 

It would have been obvious at the time of the invention to modify the equations of 
Moller and implement them in a microprocessor on a smart card as shown in Tenca 
because it would allow for the advanced technique of applying multiple exponentiations 
to be used in a cryptographic system. 

As per claim 10, Moller fails to disclose expressly the use of a method as claimed 
in claim 1 and/or of at least one microprocessor as claimed in claim 8 and/or of at least 
one device, in particular of at least one chip card and/or in particular of at least one 
smart card, as claimed in claim 9, in at least one cryptosystem, in particular in at least 
one public key cryptosystem, in at least one key exchange system or in at least one 
signature system. 

Tenca discloses the use of a method as claimed in claim 1 and/or of at least one 
microprocessor as claimed in claim 8 and/or of at least one device, in particular of at 
least one chip card and/or in particular of at least one smart card, as claimed in claim 9, 
in at least one cryptosystem, in particular in at least one public key cryptosystem, in at 
least one key exchange system or in at least one signature system (Column 1 5 lines 22- 
39, exponentiation can be performed in hardware modules as a microprocessor in a 
smart card). 

Moller and Tenca are from the same field of endeavor as multiple exponentiation. 
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It would have been obvious at the time of the invention to modify the equations of 
Moller and implement them in a microprocessor on a smart card as shown in Tenca 
because it would allow for the advanced technique of applying multiple exponentiations 

to be used in a cryptographic system. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to KEVIN HUGHES whose telephone number is (571)270- 
3365. The examiner can normally be reached on M-Th/F 9-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Lewis Bullock can be reached on 5712723759. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

December 18, 2010 /KEVIN HUGHES/ 



Application/Control Number: 1 0/591 ,545 Page 1 3 

Art Unit: 2193 

Examiner, Art Unit 21 93 

/Lewis A. Bullock, Jr./ 

Supervisory Patent Examiner, Art Unit 2193 



